Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/Tm9hptVhoYF3viTQolXIok7-Cns.roa
File: Tm9hptVhoYF3viTQolXIok7-Cns.roa (raw, json)
Hash identifier: 5jJfMD6KWBKP40FrHnbM+g3gXcWco1IfpvhQoMd6XOA=
Subject key identifier: 4E:6F:61:A6:D5:61:A1:81:77:BE:24:D0:A2:55:C8:A2:4E:FE:0A:7B
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 01870888AB06842FAEF6373A4FB317CF737D
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/Tm9hptVhoYF3viTQolXIok7-Cns.roa
Signing time: Wed 22 Mar 2023 08:56:27 +0000
ROA not before: Wed 22 Mar 2023 08:56:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47394
IP address blocks: 46.255.144.0/24 maxlen: 24
46.255.144.0/22 maxlen: 22
46.255.144.0/21 maxlen: 21
46.255.145.0/24 maxlen: 24
95.107.150.0/24 maxlen: 24
95.107.146.0/23 maxlen: 23
95.107.157.0/24 maxlen: 24
95.107.159.0/24 maxlen: 24
95.107.156.0/24 maxlen: 24
95.107.162.0/24 maxlen: 24
95.107.164.0/24 maxlen: 24
95.107.165.0/24 maxlen: 24
95.107.166.0/24 maxlen: 24
95.107.160.0/22 maxlen: 22
95.107.160.0/21 maxlen: 21
95.107.160.0/24 maxlen: 24
95.107.162.0/23 maxlen: 23
95.107.164.0/22 maxlen: 22
95.107.172.0/23 maxlen: 23
95.107.168.0/22 maxlen: 22
95.107.167.0/24 maxlen: 24
95.107.168.0/23 maxlen: 23
95.107.170.0/23 maxlen: 23
95.107.176.0/21 maxlen: 21
95.107.174.0/24 maxlen: 24
95.107.177.0/24 maxlen: 24
95.107.184.0/22 maxlen: 22
95.107.182.0/24 maxlen: 24
95.107.184.0/21 maxlen: 21
95.107.192.0/24 maxlen: 24
95.107.188.0/22 maxlen: 22
95.107.188.0/24 maxlen: 24
95.107.192.0/22 maxlen: 22
95.107.196.0/22 maxlen: 22
95.107.195.0/24 maxlen: 24
95.107.196.0/23 maxlen: 23
95.107.196.0/24 maxlen: 24
95.107.198.0/23 maxlen: 23
95.107.193.0/24 maxlen: 24
95.107.194.0/24 maxlen: 24
95.107.194.0/23 maxlen: 23
46.255.148.0/24 maxlen: 24
46.255.149.0/24 maxlen: 24
46.255.150.0/24 maxlen: 24
46.255.151.0/24 maxlen: 24
46.255.146.0/24 maxlen: 24
46.255.147.0/24 maxlen: 24
46.255.148.0/22 maxlen: 22
95.107.128.0/21 maxlen: 21
95.107.129.0/24 maxlen: 24
95.107.132.0/24 maxlen: 24
95.107.136.0/24 maxlen: 24
95.107.135.0/24 maxlen: 24
95.107.136.0/21 maxlen: 21
95.107.144.0/23 maxlen: 23
95.107.141.0/24 maxlen: 24
185.118.150.0/23 maxlen: 23
185.118.148.0/22 maxlen: 22
185.118.148.0/23 maxlen: 23
141.8.200.0/21 maxlen: 21
185.122.228.0/24 maxlen: 24
185.122.228.0/23 maxlen: 23
185.122.228.0/22 maxlen: 22
95.107.254.0/23 maxlen: 23
95.107.200.0/24 maxlen: 24
95.107.201.0/24 maxlen: 24
95.107.200.0/21 maxlen: 21
95.107.204.0/22 maxlen: 22
95.107.202.0/23 maxlen: 23
95.107.212.0/23 maxlen: 23
95.107.212.0/24 maxlen: 24
95.107.209.0/24 maxlen: 24
95.107.212.0/22 maxlen: 22
95.107.208.0/23 maxlen: 23
95.107.208.0/21 maxlen: 21
95.107.208.0/22 maxlen: 22
95.107.208.0/20 maxlen: 20
95.107.216.0/22 maxlen: 22
95.107.216.0/21 maxlen: 21
95.107.216.0/23 maxlen: 23
95.107.218.0/23 maxlen: 23
95.107.224.0/20 maxlen: 20
95.107.224.0/22 maxlen: 22
95.107.220.0/23 maxlen: 23
95.107.222.0/23 maxlen: 23
95.107.220.0/22 maxlen: 22
95.107.228.0/24 maxlen: 24
95.107.228.0/22 maxlen: 22
95.107.232.0/22 maxlen: 22
95.107.238.0/23 maxlen: 23
95.107.240.0/22 maxlen: 22
95.107.234.0/23 maxlen: 23
95.107.236.0/22 maxlen: 22
95.107.240.0/20 maxlen: 20
95.107.244.0/22 maxlen: 22
95.107.252.0/22 maxlen: 22
95.107.248.0/24 maxlen: 24
95.107.248.0/23 maxlen: 23
95.107.248.0/22 maxlen: 22
2a03:8480::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:88:ab:06:84:2f:ae:f6:37:3a:4f:b3:17:cf:73:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: Mar 22 08:56:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e6f61a6d561a18177be24d0a255c8a24efe0a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:b6:8c:d0:cb:d7:75:59:6a:e3:89:2e:71:
f2:7d:09:d9:1a:16:1f:be:97:19:e9:b1:c5:aa:17:
92:13:ce:f9:97:4d:42:df:2d:55:02:fc:bd:4c:09:
21:a2:f7:5f:4b:d1:9f:43:da:05:3d:4b:c6:5d:3b:
7b:53:5f:c0:83:42:40:c2:28:37:1a:22:51:18:df:
ac:b7:93:9a:28:d2:48:e7:e1:26:7d:76:50:f6:8a:
c1:03:24:86:bd:5a:d2:b1:e1:85:40:7b:83:78:2c:
f3:91:02:5f:c6:39:44:46:0e:61:87:67:9b:66:22:
c7:8d:f6:b1:8a:46:2c:5b:20:ca:a6:37:15:4e:41:
ce:20:19:d0:02:ec:7b:51:79:e4:db:3a:b9:52:81:
50:7f:c0:ce:c6:f5:63:a9:15:2d:e9:be:76:8e:41:
8c:cb:8b:a4:e4:bb:96:45:fc:c7:34:33:be:ed:d8:
16:00:86:df:eb:81:f5:da:e7:71:e6:09:5a:7b:20:
9b:9d:a2:aa:86:a7:6c:09:ba:47:45:bf:0b:a1:88:
27:81:41:41:9c:5e:cf:21:fb:c8:39:61:45:e3:4a:
92:43:a7:d3:19:a0:c0:00:b6:50:f5:01:0e:9b:fa:
57:db:f6:61:bc:a9:19:0d:40:48:1c:0a:74:0d:fc:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6F:61:A6:D5:61:A1:81:77:BE:24:D0:A2:55:C8:A2:4E:FE:0A:7B
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/Tm9hptVhoYF3viTQolXIok7-Cns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.144.0/21
95.107.128.0-95.107.147.255
95.107.150.0/24
95.107.156.0/23
95.107.159.0-95.107.174.255
95.107.176.0-95.107.255.255
141.8.200.0/21
185.118.148.0/22
185.122.228.0/22
IPv6:
2a03:8480::/32
Signature Algorithm: sha256WithRSAEncryption
6d:6d:98:f9:7a:9d:ed:c7:fb:cb:72:0b:77:bc:76:16:a1:dc:
5a:a6:82:f7:df:55:50:5b:15:2c:d4:ca:03:a7:dc:78:fc:39:
39:ca:0f:21:d8:d0:2d:bd:cb:54:d3:f0:a2:ba:56:a8:07:92:
e8:5c:57:1f:07:36:69:20:a3:e8:fa:b5:74:fa:a6:33:87:99:
d9:ef:3f:02:3c:e3:35:c6:62:df:d6:d6:ed:09:cb:cb:8c:92:
4e:cf:bd:d9:a5:7c:2b:bd:9e:a7:64:71:4b:01:d5:3e:99:2e:
54:5c:43:4d:d5:a6:c4:83:21:65:11:18:f6:67:38:d8:b8:d0:
b5:f3:01:4f:cf:00:45:e9:2d:68:28:1b:c9:4c:f6:90:db:54:
b9:16:e4:2e:65:29:18:dd:9b:fa:69:3d:a3:4e:88:2a:23:c3:
8b:da:21:77:6e:68:cb:88:b5:66:c0:8a:2b:73:af:2a:b3:f6:
a2:cb:c1:65:04:d3:1c:a3:ca:2c:57:4e:22:99:d7:db:69:23:
96:43:8e:c5:b5:00:4a:e6:17:33:5a:31:6a:39:41:fd:33:36:
82:dd:7e:6f:3f:fe:7e:aa:e8:60:a9:12:d5:74:89:7f:e9:db:
fb:a0:10:d1:8c:5d:aa:4f:38:4b:7f:9d:43:56:09:50:4e:8f:
df:ee:45:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 12:38:56 2023 by rpki-client on console-fra.rpki-client.org